- Kod: Zaznacz wszystko
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-06-2015
Ran by Kamila (administrator) on KAMYK on 12-06-2015 09:54:10
Running from C:\Users\Kamila\Downloads
Loaded Profiles: Kamila (Available Profiles: Kamila)
Platform: Windows 8.1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\System32\cenzura!.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [114048 2013-10-18] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-06-17] (Atheros Communications)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1216047334-3108880273-2642645986-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com/?pc=ASJB
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Tcpip\Parameters: [DhcpNameServer] 31.11.202.254 37.8.214.2
FireFox:
========
FF ProfilePath: C:\Users\Kamila\AppData\Roaming\Mozilla\Firefox\Profiles\11ef91y2.default
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-12] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
Chrome:
=======
CHR Profile: C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-12]
CHR Extension: (Google Docs) - C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-12]
CHR Extension: (Google Drive) - C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-12]
CHR Extension: (YouTube) - C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-12]
CHR Extension: (Google Search) - C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-12]
CHR Extension: (Google Sheets) - C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-12]
CHR Extension: (Google Wallet) - C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-12]
CHR Extension: (Gmail) - C:\Users\Kamila\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-12]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-06-17] (Windows (R) Win 7 DDK provider) [File not signed]
R2 cenzura!; C:\Windows\system32\cenzura!.exe [117704 2013-10-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116680 2013-10-18] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148160 2013-10-18] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [126952 2013-10-18] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-28] (WildTangent)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-18] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-05-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-16] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-06-17] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-06-17] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [145640 2013-10-18] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [116752 2013-10-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [289744 2013-10-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494296 2013-10-18] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-05-16] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-12 09:54 - 2015-06-12 09:54 - 00001142 _____ C:\Users\Kamila\Desktop\Witamy w rejestracji produktu ASUS.lnk
2015-06-12 09:53 - 2015-06-12 09:54 - 00000000 ____D C:\FRST
2015-06-12 09:53 - 2015-06-12 09:53 - 02108928 _____ (Farbar) C:\Users\Kamila\Downloads\FRST64.exe
2015-06-12 09:51 - 2015-06-12 09:54 - 00012574 _____ C:\Users\Kamila\Downloads\FRST.txt
2015-06-12 09:49 - 2015-06-12 09:49 - 00000000 ___RD C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-06-12 09:45 - 2015-06-12 09:45 - 00001177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-06-12 09:45 - 2015-06-12 09:45 - 00001165 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-06-12 09:45 - 2015-06-12 09:45 - 00000000 ____D C:\Users\Kamila\AppData\Roaming\Mozilla
2015-06-12 09:45 - 2015-06-12 09:45 - 00000000 ____D C:\Users\Kamila\AppData\Local\Mozilla
2015-06-12 09:45 - 2015-06-12 09:45 - 00000000 ____D C:\ProgramData\Mozilla
2015-06-12 09:45 - 2015-06-12 09:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-12 09:45 - 2015-06-12 09:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-12 09:43 - 2015-06-12 09:43 - 00243472 _____ C:\Users\Kamila\Downloads\Firefox Setup Stub 38.0.5.exe
2015-06-12 09:40 - 2015-06-12 09:40 - 00002287 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-12 09:40 - 2015-06-12 09:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-12 09:39 - 2015-06-12 09:49 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-12 09:39 - 2015-06-12 09:44 - 00004040 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-06-12 09:39 - 2015-06-12 09:44 - 00003804 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-06-12 09:39 - 2015-06-12 09:44 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-12 09:39 - 2015-06-12 09:40 - 00000000 ____D C:\Users\Kamila\AppData\Local\Google
2015-06-12 09:39 - 2015-06-12 09:40 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-12 09:39 - 2015-06-12 09:39 - 00000000 ____D C:\Users\Kamila\AppData\Local\Deployment
2015-06-12 09:39 - 2015-06-12 09:39 - 00000000 ____D C:\Users\Kamila\AppData\Local\Apps\2.0
2015-06-12 09:29 - 2015-06-12 09:31 - 00000000 ____D C:\AdwCleaner
2015-06-12 09:26 - 2015-06-12 09:26 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-06-12 09:26 - 2015-06-12 09:26 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-06-12 09:26 - 2015-06-12 09:26 - 00003382 _____ C:\Windows\System32\Tasks\Update Checker
2015-06-12 09:25 - 2015-06-12 09:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-06-12 09:11 - 2015-06-12 09:53 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1216047334-3108880273-2642645986-1001
2015-06-12 09:11 - 2015-06-12 09:11 - 00000000 __SHD C:\Users\Kamila\AppData\Local\EmieUserList
2015-06-12 09:11 - 2015-06-12 09:11 - 00000000 __SHD C:\Users\Kamila\AppData\Local\EmieSiteList
2015-06-12 09:11 - 2015-06-12 09:11 - 00000000 ____D C:\Users\Kamila\AppData\Roaming\WebStorage
2015-06-12 09:10 - 2015-06-12 09:49 - 00000000 __RDO C:\Users\Kamila\OneDrive
2015-06-12 09:10 - 2015-06-12 09:10 - 00003976 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E7387A6B-7F69-4D91-A263-05E785B5FC9E}
2015-06-12 09:10 - 2015-06-12 09:10 - 00000000 ____D C:\Users\Kamila\AppData\Local\GWX
2015-06-12 09:08 - 2015-06-12 09:49 - 00000093 _____ C:\Users\Kamila\AppData\Roaming\sp_data.sys
2015-06-12 09:07 - 2015-06-12 09:33 - 00000000 ____D C:\ProgramData\USBChargerPlus
2015-06-12 09:07 - 2015-06-12 09:07 - 00000000 ____D C:\Users\Kamila\Documents\Bluetooth Folder
2015-06-12 09:07 - 2015-06-12 09:07 - 00000000 ____D C:\Users\Kamila\AppData\Roaming\Macromedia
2015-06-12 09:07 - 2015-06-12 09:07 - 00000000 ____D C:\Users\Kamila\AppData\Local\BMExplorer
2015-06-12 09:06 - 2015-06-12 09:07 - 00000000 ____D C:\Users\Kamila\AppData\Local\PackageStaging
2015-06-12 09:06 - 2015-06-12 09:06 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-12 09:06 - 2015-06-12 09:06 - 00000000 ____D C:\Users\Kamila\AppData\Roaming\Atheros
2015-06-12 09:06 - 2015-06-12 09:06 - 00000000 ____D C:\Users\Kamila\AppData\Local\NVIDIA
2015-06-12 09:05 - 2015-06-12 09:07 - 00000000 ____D C:\Users\Kamila\AppData\Local\Packages
2015-06-12 09:05 - 2015-06-12 09:05 - 00001456 _____ C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-12 09:05 - 2015-06-12 09:05 - 00000188 _____ C:\Windows\FixPatch.log
2015-06-12 09:05 - 2015-06-12 09:05 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-06-12 09:05 - 2015-06-12 09:05 - 00000000 ____D C:\Users\Kamila\AppData\Roaming\Adobe
2015-06-12 09:05 - 2015-06-12 09:05 - 00000000 ____D C:\Users\Kamila\AppData\Local\VirtualStore
2015-06-12 09:02 - 2015-06-12 09:05 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-12 09:02 - 2015-06-12 09:02 - 00000020 ___SH C:\Users\Kamila\ntuser.ini
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\Ustawienia lokalne
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\Szablony
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\Moje dokumenty
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\Menu Start
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\Documents\Moje wideo
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\Documents\Moje obrazy
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\Documents\Moja muzyka
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\Dane aplikacji
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\AppData\Local\Historia
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 _SHDL C:\Users\Kamila\AppData\Local\Dane aplikacji
2015-06-12 09:02 - 2015-06-12 09:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-06-12 09:02 - 2014-03-18 17:27 - 00000369 _____ C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-06-12 09:02 - 2014-03-18 17:27 - 00000369 _____ C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-06-12 09:00 - 2015-06-12 09:10 - 00000000 ____D C:\Users\Kamila
2015-06-12 09:00 - 2014-05-16 03:59 - 00000000 ___RD C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-12 09:00 - 2014-03-18 17:38 - 00000000 ___RD C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-12 09:00 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-12 09:00 - 2013-08-22 17:36 - 00000000 ____D C:\Users\Kamila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-06-12 08:54 - 2015-06-02 19:47 - 02502928 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-06-12 08:54 - 2015-06-02 19:47 - 02209080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-06-12 08:54 - 2015-06-02 19:47 - 00129120 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2015-06-12 08:54 - 2015-06-02 19:47 - 00110576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2015-06-12 08:54 - 2015-05-16 00:01 - 00133288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-06-12 08:54 - 2015-05-15 23:05 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-06-12 08:54 - 2015-05-15 22:47 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-06-12 08:54 - 2015-05-15 22:23 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-06-12 08:54 - 2015-05-15 21:42 - 03682304 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-06-12 08:54 - 2015-05-15 21:32 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-06-12 08:54 - 2015-05-15 21:31 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-06-12 08:54 - 2015-05-15 21:28 - 02223104 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-06-12 08:54 - 2015-05-15 21:28 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-06-12 08:54 - 2015-05-15 21:28 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-06-12 08:54 - 2015-05-15 21:27 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-06-12 08:54 - 2015-05-15 21:21 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-06-12 08:54 - 2015-05-15 21:21 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-06-12 08:54 - 2015-05-15 21:19 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-06-12 08:54 - 2015-05-15 21:19 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-06-12 08:54 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-06-12 08:54 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-06-12 08:54 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-06-12 08:54 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-06-12 04:58 - 2015-06-12 04:58 - 00028672 ___SH C:\Windows\system32\config\BCD-Template.LOG
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-12 09:54 - 2014-10-14 15:35 - 00377002 _____ C:\Windows\WindowsUpdate.log
2015-06-12 09:52 - 2014-05-16 03:24 - 00749988 _____ C:\Windows\system32\perfh00E.dat
2015-06-12 09:52 - 2014-05-16 03:24 - 00180594 _____ C:\Windows\system32\perfc00E.dat
2015-06-12 09:52 - 2014-05-16 03:14 - 00738160 _____ C:\Windows\system32\perfh005.dat
2015-06-12 09:52 - 2014-05-16 03:14 - 00154424 _____ C:\Windows\system32\perfc005.dat
2015-06-12 09:52 - 2014-05-16 03:05 - 00814586 _____ C:\Windows\system32\perfh015.dat
2015-06-12 09:52 - 2014-05-16 03:05 - 00166422 _____ C:\Windows\system32\perfc015.dat
2015-06-12 09:52 - 2014-03-18 17:26 - 03627856 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-12 09:48 - 2014-03-18 10:16 - 00002090 _____ C:\Windows\PFRO.log
2015-06-12 09:48 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-12 09:47 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-06-12 09:42 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-06-12 09:31 - 2014-10-14 16:05 - 00000000 ____D C:\Program Files\Common Files\McAfee
2015-06-12 09:28 - 2013-08-22 17:36 - 00000000 ___HD C:\Windows\ELAMBKUP
2015-06-12 09:26 - 2014-05-15 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-06-12 09:25 - 2014-05-15 19:14 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-06-12 09:25 - 2013-08-22 16:46 - 00020162 _____ C:\Windows\setupact.log
2015-06-12 09:14 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-06-12 09:08 - 2014-10-14 16:05 - 00000000 ____D C:\ProgramData\McAfee
2015-06-12 09:08 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-06-12 09:07 - 2014-10-14 16:03 - 00000000 ____D C:\ProgramData\Atheros
2015-06-12 09:06 - 2014-10-14 16:05 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-06-12 09:05 - 2014-05-16 03:59 - 00000000 ____D C:\Windows\Panther
2015-06-12 09:05 - 2014-05-16 02:27 - 00000000 ____D C:\Windows\Log
2015-06-12 09:03 - 2013-08-22 16:44 - 00337840 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-12 09:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\sk-SK
2015-06-12 09:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2015-06-12 09:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sk-SK
2015-06-12 09:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\en-GB
2015-06-12 09:02 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-06-12 08:55 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-06-12 08:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\restore
2015-06-12 04:58 - 2014-05-15 19:07 - 00000000 __SHD C:\Recovery
2015-06-12 04:58 - 2013-08-22 17:36 - 00262144 _____ C:\Windows\system32\config\BCD-Template
2015-06-12 04:46 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-06-12 03:59 - 2013-08-22 15:36 - 00000000 __RHD C:\Users\Default
==================== Files in the root of some directories =======
2015-06-12 09:08 - 2015-06-12 09:49 - 0000093 _____ () C:\Users\Kamila\AppData\Roaming\sp_data.sys
2014-10-14 15:50 - 2014-10-14 15:50 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-05-15 19:14 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-05-15 19:14 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-05-15 19:14 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS
Some files in TEMP:
====================
C:\Users\Kamila\AppData\Local\Temp\Quarantine.exe
C:\Users\Kamila\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-12 03:59
==================== End of log ============================
Addition
- Kod: Zaznacz wszystko
Additional scan result of Farbar Recovery Scan Tool (x64) Version:08-06-2015
Ran by Kamila at 2015-06-12 09:55:04
Running from C:\Users\Kamila\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1216047334-3108880273-2642645986-500 - Administrator - Disabled)
Gość (S-1-5-21-1216047334-3108880273-2642645986-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1216047334-3108880273-2642645986-1003 - Limited - Enabled)
Kamila (S-1-5-21-1216047334-3108880273-2642645986-1001 - Administrator - Enabled) => C:\Users\Kamila
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.3 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.01.0003 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.9 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0036 - ASUS)
Game Explorer Categories - casual (HKLM-x32\...\WildTangentGameProvider-asus-casual) (Version: 3.2.0.6 - WildTangent, Inc.)
Game Explorer Categories - enthusiast (HKLM-x32\...\WildTangentGameProvider-asus-enthusiast) (Version: 3.2.0.6 - WildTangent, Inc.)
Game Explorer Categories - family (HKLM-x32\...\WildTangentGameProvider-asus-family) (Version: 3.2.0.6 - WildTangent, Inc.)
Game Explorer Categories - kids (HKLM-x32\...\WildTangentGameProvider-asus-kids) (Version: 3.2.0.6 - WildTangent, Inc.)
Game Explorer Categories - touch (HKLM-x32\...\WildTangentGameProvider-asus-touch) (Version: 3.2.0.6 - WildTangent, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2105 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 pl) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 pl)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)
NVIDIA Graphics Driver 333.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 333.02 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.326 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39048 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.33.529.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7224 - Realtek Semiconductor Corp.)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.2 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
12-06-2015 08:54:43 Instalator modułów systemu Windows
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1ADEE0B6-0ADA-4014-899B-F8EF151E4CCB} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {25F043F6-C200-438D-A732-E5C92D8B41C2} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {3441BF85-CE66-4398-BF5E-2EF996C29BB8} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)
Task: {47D1EAEB-039F-42CC-A5A8-9E3C8D5C83BE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-12] (Google Inc.)
Task: {4A1BD5A9-D2E3-4608-AC8B-6AFAF83D3E7E} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-03-27] (ASUSTek Computer Inc.)
Task: {5634FFF3-9282-4B36-BA7D-10A76CB20BF0} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-04-15] (Realtek Semiconductor)
Task: {657342A5-0287-4C36-A218-D115084503B5} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-21] (Microsoft Corporation)
Task: {746DA728-CCE5-4D6B-87AF-F761CBDA08A2} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-22] (Microsoft Corporation)
Task: {93ED37A3-CF5D-4A15-A3FA-DC44017F1B83} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {A4BD8E55-8F37-4A7F-8D88-11F8956FFA31} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)
Task: {AD22408B-AECA-4DAC-A820-391677F9AC21} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-22] (Microsoft Corporation)
Task: {BF730FDD-4932-4215-BB80-A5FBEB9CB24B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10] (Realtek Semiconductor)
Task: {C19A8120-58E4-4E26-B6F0-C87C345737DF} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {D1219F95-50BC-4A30-AC84-04D29117AE5B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-12] (Google Inc.)
Task: {DE3643FC-EB85-4E09-8542-BB1936DDD78C} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-04-02] (ASUS)
Task: {FFD5035B-1167-43D8-87AD-0AA3697EDD23} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-22] (Microsoft Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2014-10-14 15:47 - 2014-04-08 23:06 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2014-06-17 09:35 - 2014-06-17 09:35 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2014-06-17 09:36 - 2014-06-17 09:36 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2014-06-17 09:23 - 2014-06-17 09:23 - 00020992 _____ () C:\Program Files (x86)\Bluetooth Suite\L10n\pl-PL\BtTray.pl-PL.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2015-06-12 09:40 - 2015-06-05 20:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libglesv2.dll
2015-06-12 09:40 - 2015-06-05 20:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libegl.dll
2014-10-14 15:41 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Kamila\OneDrive:ms-properties
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1216047334-3108880273-2642645986-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kamila\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\tapeta z przeglądarki fotografii systemu windows.jpg
DNS Servers: 31.11.202.254 - 37.8.214.2
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{3DBA0525-7950-4055-A134-B76B05D973E0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1534BE62-63D6-4B7E-A3A1-CDB7FA8B397E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8A506E6D-394D-4ED1-9F40-93B73BFC35FD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{541A45FD-BE77-43AA-93D1-74B2CACD82E7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F67DE577-F6B2-409D-89C1-50B13AFF74F1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/12/2015 04:45:33 AM) (Source: Windows Search Service Profile Notification) (EventID: 2) (User: )
Description: Nie można usunąć indeksowanych danych usługi Windows Search dla użytkownika <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Search-ProfileNotify' Guid='{FC6F77DD-769A-470E-BCF9-1B6555A118BE}' EventSourceName='Windows Search Service Profile Notification'/><EventID Qualifiers='49152'>2</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2015-06-12T02:45:33.000000000Z'/><EventRecordID>11</EventRecordID><Correlation/><Execution ProcessID='0' ThreadID='0'/><Channel>Application</Channel><Computer>Kamyk</Computer><Security/></System><ProcessingErrorData><ErrorCode>15005</ErrorCode><DataItemName>__binLength</DataItemName><EventPayload>4B0061006D0079006B005C00410064006D0069006E006900730074007200610074006F00720000003000780038003000300034003200310030003300000000000000</EventPayload></ProcessingErrorData></Event> w odpowiedzi na usunięcie profilu użytkownika. Kod błędu %2.
%3.
System errors:
=============
Error: (06/12/2015 09:31:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0 niespodziewanie zakończyła pracę. Wystąpiło to razy: 2.
Error: (06/12/2015 09:31:16 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Usługa udostępniania w sieci programu Windows Media Player niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (06/12/2015 09:31:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Intel(R) Dynamic Application Loader Host Interface Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (06/12/2015 09:31:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Intel(R) ME Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (06/12/2015 09:31:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa GamesAppIntegrationService niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (06/12/2015 09:31:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Usługa buforowania czcionek platformy Windows Presentation Foundation, wersja 3.0.0.0 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 0 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (06/12/2015 09:31:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Error: (06/12/2015 09:31:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa ZAtheros Bt and Wlan Coex Agent niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (06/12/2015 09:31:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa NVIDIA Network Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (06/12/2015 09:31:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Intel(R) Dynamic Platform and Thermal Framework Low Power Mode Service Application niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Microsoft Office:
=========================
Error: (06/12/2015 04:45:33 AM) (Source: Windows Search Service Profile Notification) (EventID: 2) (User: )
Description: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Search-ProfileNotify' Guid='{FC6F77DD-769A-470E-BCF9-1B6555A118BE}' EventSourceName='Windows Search Service Profile Notification'/><EventID Qualifiers='49152'>2</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2015-06-12T02:45:33.000000000Z'/><EventRecordID>11</EventRecordID><Correlation/><Execution ProcessID='0' ThreadID='0'/><Channel>Application</Channel><Computer>Kamyk</Computer><Security/></System><ProcessingErrorData><ErrorCode>15005</ErrorCode><DataItemName>__binLength</DataItemName><EventPayload>4B0061006D0079006B005C00410064006D0069006E006900730074007200610074006F00720000003000780038003000300034003200310030003300000000000000</EventPayload></ProcessingErrorData></Event>
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-4030U CPU @ 1.90GHz
Percentage of memory in use: 18%
Total physical RAM: 8075.26 MB
Available physical RAM: 6548.93 MB
Total Pagefile: 9995.26 MB
Available Pagefile: 8286.73 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:343.55 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.64 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5282CDDA)
Partition: GPT Partition Type.
==================== End of log ============================
